[Issue 6083] ppolicy should also support invocation of an external password checker