password rules make very little sense except for minimum number of characters.

when you impose rules on a password you also imply a list of non-possibilities.