@nerdstein lets forget change_pwd_page for a moment and lets say there is a r...

@nerdstein lets forget change_pwd_page for a moment and lets say there is a requirement to have custom change password page with some fancy stuff and we hide the password fields on user edit page, code in password_policy module will fail.

1. We are hardcoding the redirect URL here
2. We don't have any config to store list of pages/urls which can be added to exception and allow user to access

The way I've thought here (which could be wrong or better solution possible) is to allow developers to provide their own route for change password page and use the user profile edit route (default from Core) as default value.

Let me know your thoughts after considering points above, again we shouldn't just think of one contrib module available today.