The unsafe passwords list should be read from a separate config file. This would allow for longer and safer blacklists.