3 ms·

Possibly flippant response: because if the user doesn't want to keep rekeying their password, they should not be forced to.