strip whitespace
Use a hookset to support custom clean_password algorithms