I believe this restriction originally came from an erroneous use of report-password in go-mysql which has since been resolved: go-mysql-org/go-mysql#966
In order to fix this, we'll need to bump go-mysql to a newer version and then remove the length check.