hardening: detect weird password situations