Move password rules documentation up

That's the big appeal of these profiles anyway