[keycloak-user] Improvement required in password policy evaluation