Password policy that supports passphrases / phrase passwords

I agree @danmichaelo. Please see here and consider upvoting the request for all improvements and changes needed, including your suggestion here, to align with the current OWASP 4.0 standards.