This should be an option to at least enforce password changes or not.
Small clients are bothered by passwords and so they enable the saving of user id and password.
Large sites are becoming more security conscious and so should Softrak Adagio. You should have a password security setting switch in Console that would force users to change passwords, and a defined cycle period.
Retaining password history and checking for duplicates would be great but at least start with the basics for security.
Brian