Enforce minimum password lengths.