Allow users to specify a callback to enforce a password policy

Implements #10 with a callback named "password_policy_callback"