Restrict searches but lift restrictions on passwords