Flesh out password specs