[PATCH 3/4] Don't allow weak user passwords