[keycloak-user] custom password policies