Azure AD B2C Custom Policy with force password reset after 90 days - can change to existing password

Question

I have successfully integrated the Azure AD B2C Custom Policy with force password reset after 90 days. All works well except for one thing. User is presented with "New Password/Confirm Password" entry fields. User is able to set the new password same as their old password and it succeeds.

Is it possible to update the 90day sample, such that the user is prompted for their old password and cannot change to their old password?