Actually, I think @lzap you discovered a bug :-) root_pass would be the hash here, so this length requirement is meaningless.