If we 'limit' the passwords to 'Setting[:password_count_former_banned]' than we use the correct number of former passwords for the first password change after lowering  'password_count_former_banned' .