Allow for custom separators

There are some use cases where the hard-coded separators are not allowed as part of the password, so, it would make sense to allow callers to pass a custom list.