dsdb: Add comment showing where the normal password rules are applied