Increase minimum entropy

'new-password' seems unacceptably weak, so don't allow it.