(ITS#6083) ppolicy should also support invocation of an external password checker