The first user becomes the workspace admin.
At least 8 characters. We check against known leaked passwords.