changed visibility to prevent leakage of implementation details, provided AbstractPasswordPolicyResponder