Back cracklib requirement down to 2.8

Disable FascistCheckUser for now