Add in the minimum age of a password. This ensures that users can't just enter passwords over and over to beat the re-used passwords restrictions.