* remove no-op check_password_policy() and references to it
* add 'static' to functions that need it
* remove unused function check_acl_user()