It must be made possible to enable password rotation, as the password used for encrypting the storage area must be changed every 365 days.
