Managing Fine-Grained Password Policies