Default password policy - Oracle fusion applications

Dear Team,

We are using Fusion SaaS version 25B.

1)We have to add strong password policy to all users. In default profile, we have password policy as 8 charecters and 1 number. We also want to add one special charecter, for this purpose, can we change the default password policy? Is it supported?

2) We have a user for which password should never expire. We use this user in rest api connections.

We will create a new user category and specify the password policy to 0(never expire). We will then change the profile for that user from default user category to new user category. Will this work?