CVE-2018-16857 selftest: Split up password_lockout into tests with and without a...