For old systems, password max length must be limited.
Append an option in password policy to be able to define max length.