Password settings in Web.Config file for PNAgent changes automatically when "Configure XenApp Services Support" Console is opened in Storefront Snapin.
You have modified web.config file manually or using EnablePnaForStore.ps1 for PNAgent site for the Password Options. When you open "Configure XenApp Services Support" Console and click OK on it, the settings change back...