When creating a new account from the AAA website, a redirect from secure.wa.aaa.com to identity.wa.aaa.com happens such that the existing quirk doesn't seem to be honored. Removing the secure subdomain should allow the quirk to work anywhere on the site (though still under the wa subdomain).
When creating a new account from the AAA website, a redirect from
secure.wa.aaa.com
toidentity.wa.aaa.com
happens such that the existing quirk doesn't seem to be honored. Removing thesecure
subdomain should allow the quirk to work anywhere on the site (though still under thewa
subdomain).Overall Checklist
for password-rules.json