Add optional regex to enforce password complexity