If the password length requirement for SupportUser is 13 characters or whatever, can we just enforce this in the application. We keep having to ask them to lengthen it whenever there is a server issue and we need support. If it is critical that it is this long, then it should require it in the software right?