sec: Maximum password size is not so much the size of the size element