[KaiserPro]

Whilst I agree that following security best practices is important, I think you miss the point of my post. WE are implementing the rules they drew up. From what I can see they did not.