Post #4290656

@ianh@phpc.social if you hit the must not be common / easily guessable, the other requirements aren't really needed.