Comment by lxgr

At least for that one, you can now point to NIST recommendations, which finally discourage rotating passwords.