Statistics for Revisiting Password Rules: Facilitating Human Management of Passwords