Add some optional policies around password resets, such as password reuse, forced password resets, allowed frequency of password resets