#27: forbid trivial PINs like 11111, 12345, ...