[fwip]

Limiting the character set is done to reduce the frequency of "can't enter my password" support calls, not to increase security directly. Same with the maximum password length.