s4-subdomain: use a password length of 128