Validates a candidate password against application requirements.
Plaintext password to validate.
An error message when invalid; otherwise null.
Validates a candidate password against application requirements.