Which is the best way to add new password triviality and composition checks into the Solaris OE?

A.
replace the /usr/bin/passwd command

B.
add the new checks to /etc/default/passwd

C.
install a PAM module and update /etc/pam.conf

D.
install a PAM module and update /etc/pam.d/passwd

E.
replace the /usr/lib/security/pam_authtok_check.so.1 library