@b0rk recently added to the list:
"800-53B 5.1.1.2 p9" which is the chapter and verse NIST reference for "don't make me change my password every 90 days you absolute walnut"