We would like a feature to enable user passwords to expire af a set amount of days (3 months), and then enforce a password change.

Similar to what 'Adaptavist User Security Management' plugin does now - but this plugin will not be available with the new on-demand platform.