(ITS#8497) userPassword attribute in password policy