handle local password policies