password policy enforcement for contacts, #32456