make sure we don't accidentally create a weak password