[Issue 9857] New: add password policy