[keycloak-user] implementing new password policy