users: Ensure minimum length of 6, not 7 (OS-26)