Accept 'yellow' passwords, add a hard limit for submit activation.