Customize Password complexity & password expiration?

[xorkh]

I have a project that has a some specific requirements and wanted to make sure tensei supports this or can be extended with hooks.

1. When user registers or resets password enforce custom password strength requirements. Is there any way to override the built in password validation? If not I think I can use auth().beforePasswordReset and auth().beforeRegister hooks to customize this behavior.

2. Password expiration after X days. I think for this I can use the auth().beforeLogin hook but how do I tie the user to a change password date in the database? Would I need to create a different table with relationship to users or can I add additional fields to the user table?