No password enforcement in CA Identity Portal despite security being enabled