Set password policy restrictions