It seems that you can have NFR's for practically anything and I feel that there's a considerable gap in the way we capture the requirements of our system. I'm a firm believer in "If it's a required, then it should be tested". But somethings on the NFR list are quite difficult to write an automated test for.