Dash instead of underscores in create-policy

Two arguments, `root-password` and `max-count` were using underscores instead of dashes. In order to preserve backwards-compatibility, both forms will be accepted, but only the dash format will be discussed in the documentation.

Additionally, root-password was not required in the validation but was required in the database. Fixing the validation to reflect this.