password        requisite                       pam_passwdqc.so min=disabled,24,12,9,8 similar=deny  enforce=everyone retry=3 
password        requisite                       pam_pwhistory.so use_authtok remember=4
password        [success=1 default=ignore]      pam_unix.so obscure use_authtok try_first_pass sha512 rounds=10000
password        requisite                       pam_deny.so
password        required                        pam_permit.so