"The credit system involves giving "length credits" for using
non-lowercase characters (so you can have a shorter password than
the minimum length if it uses non-lowercase characters), but this
can be confusing for users, so it may be best to just require
certain types of character."