The US standards office wants to do away with periodic password changes