---
features:
  - |
    The parameters KeystoneChangePasswordUponFirstUse,
    KeystoneDisableUserAccountDaysInactive, KeystoneLockoutDuration,
    KeystoneLockoutFailureAttempts, KeystoneMinimumPasswordAge,
    KeystonePasswordExpiresDays, KeystonePasswordRegex,
    KeystonePasswordRegexDescription, KeystoneUniqueLastPasswordCount were
    introduced. They all correspond to keystone configuration options that
    belong to the security_compliance group.