Unfortunately a lot of these programs are smart enough to figure this out automatically yet the complexity checkers aren't. I think it would be a good idea in an enterprise environment to have a a few cracking servers try to generate the potential new password for a few seconds since a lot of these passwords are easy to derive.