AEM user password expiry

When setting up users with AEM I need to add extra security in terms of password expiry etc. There is nothing within the user admin or documentation to suggest how or if it's available as a config. I did see an article about 5.6.1 and the configuration in

http://localhost:4502/system/console/configMgr/org.apache.jackrabbit.oak.security.user.UserConfigurationImpl

It suggested that there is a max password age and also a change login password configuration. I'm using AEM 6.0 SP2 and when I check the same config there are not there. However when opening it is mentions something that the items displayed are based on defaults pre-defined. I assume I have to do something to get all items/descriptions displayed in the config dialog or is it that AEM 6.0 doesn't support password expiry age.

I want to be able to set at a global level only so applies to all. Assume that key system users e.g. admin etc will be unaffected...hope so.

Any thoughts anyone?