Allow users to specify a callback to enforce a password policy