master: extending the password policy