why password_config isn't being respected? related to https://github.com/therevivalists/synapse/pull/1#issuecomment-2120844725