MDL-47830 auth: Add pw rotation restrictions