Yeah. We are already there on the earier password thing. I eased up the strength and had it time out at 60 minutes. It sounds funny, but I think they were honestly wondering about alternatives like fingerprint, etc. It's an uphill battle for stuff like this but I at least try my best to give even the silly requests due diligence.
Least I can say I looked right?