[DOC] Password validation settings used in demo config tool are not the same as the ones shipped with OpenSearch.

[DarshitChanpura]

Brought to highlight during discussion on https://github.com/opensearch-project/security/pull/4071, it should be documented that the password validation settings (regex + length) are not the same as the ones that supplied via configurable settings[1][2] that are shipped with OpenSearch. Inspired by these two, the values introduced in demo admin user's password validation cannot be consumed as the configurable settings, since the demo script executes before the OpenSearch settings come into play.

Actionable items:

• The difference should be clearly documented to avoid any confusion around the configurable settings and the ones used for admin user.

Relevant information:

• For more context read this discussion: https://github.com/opensearch-project/security/pull/4071#discussion_r1503553294

---

[1] - plugins.security.restapi.password_min_length [2] - plugins.security.restapi.password_validation_regex

[stephen-crawford]

[Triage] Hi @DarshitChanpura, thanks for filing this issue. This looks like a good documentation fix. Going to mark as triaged.