Best way to require valid password during update action

[zachdaniel]

In the long term I’d like to introduce the ability for individual policies to produce user-readable error messages, until then a global validation is probably the way