[keycloak-user] customizing password policy