I also refused to solve a part of the task because it would lead to bad password policy. Instead I property-tested the generator.