custom policy form · nist · pci · hipaa presets · batch audit · runs locally
length ≥ 8 · block breached/common passwords · no forced rotation
uppercase lowercase digit symbol block common