Make minimum password strength configurable.