SECURITY: Limit passwords to 200 characters

Prevents layer 8 attack.
Merge remote-tracking branch 'origin/stable' into pkgr