One reason why many sites are hacked is because users don't change their passwords frequently enough, if at all.
This plugin would be ideal, if it also forced users to do this, based on an interval of x days after registration or after the last password change. Any chance of adding this functionality? I would even pay for such a plugin to help secure my sites better. :-)