s3: Do not use state->mem_ctx in fillup_password_policy