hardening: pam password quality requirements