Allow low level password validity checks (if
isAuthenticationPolicyEnabled only).
Adjust tests to handle better password history.