How timely!  Just last night I was frustrated by a stupid policy when changing my online banking password (my bank is now listed).  I think his once-a-month policy could stand to be more aggressive, though.