[389-users] enforcing password policy