mtlkexpy

My thought process behind the exclude list is to be used together with the partial list for provisioning new user accounts, e.g., bringing on many new users at one time...

It is just a password whitelist - in this case though, it's one that I control with the password history requirement. The problem with choosing one that passes the filter...

Ultimately, @brockrob did a better job than myself at the partial/contains matching (I'm certainly no expert, just a tinkerer), so might as well close this PR. If you have any...

I agree that is a better solution than the password whitelist, and would certainly solve the problem I was trying to address.