s4:passwords.py - add another two failure cases