* Set op to something not undef
* Enhance password policy description and show it at the point of password change - not before, at login time