openldap: force password policy

Forcing SHA password policy and having openldap hash cleartext password
as they are being added/modified

Change-Id: Ib9411cafd153a46b8c2ad7dda2f3182ac3a49010