[rwth-security] Microsoft makes all new accounts passwordless by default