-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In the Universal Password policy define an excluded string/word/whatever
and make that password '&' and it will not be allowed anywhere in the
password.

Good luck.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJQF/y1AAoJEF+XTK08PnB57XQQAKNZyeLqfvNbl45ecg4o59Gj
k/7ARhPxgMwczoSlCSM3GW3ggYeDb9Eu3pEjy/77G3oLQ1soWcEWJ99j9k9I/rer
Gwg4Th5YE7tYepHl1YAA9ZujRw8LcnRPSrr0289KjARv6z11x1 mmKsVG5LC4w9Qu
58nwKVI/ARUQWPuLvv7bv2vUhibGYhyMVMG0Jsmehp+rJLjbxZj7qmmXGR 8FNr9t
ohw/Ok6xspjgygUQLRHg89WvH52vWtSc/pofgG4YPEAbJzIaOslPpnfeGkzJvkdF
UAgb0LIdhZpbyuN/xmj2ydvMTAeZE6iuW36giQnb3mBcgxUXRwgkVQIMZRkUQ2rx
74LWTALfAOm+Z4iHf0bvHMmEZPXMnFlXFb8dyzA2tgUTXXIxy1 C0ELOHOfRMx6sS
Wpj8Dxb6kFYvCWqeQxa7YyrwlgFf0rpy/SoJPH6jkT7mxOp22mwCAyUkKmueSsdA
EJUymFrdF4tFatRkSGjNndmh/N1WDBf5zH+toZyRXztDdJpGtB5NRcQ2MUinc52q
2zHGagRnRDxNM6ABxmdZqAsVSgzZ2QrlI+pVy6VsoKh46L5yor 6V6fEMwFSfCrFK
WYERZ9DwEr9UmZfHPHtzBVYWL4DWVUNMRrg7fraGpZxXvM/xzVatKklzbvpG7MWp
fjBzQPOQ+sdCzBdbQNuT
=GgS4
-----END PGP SIGNATURE-----