You can use it today with `pattern="[a-zA-Z0-9]+"` which will require an alphanumeric password only. Obviously you can change the regex pattern to anything you want.
Although `passwordrules` seems to allow people that don't know regex to create these validation rules too. Pretty interesting.