These rules would be perfect constraints for brute force attacks