Improve UI to set force

The UI to select a role which then sets those users to have to change password is sort of wrong.

i think a pretty typical use case is that most sites have default users NOT in a role. And we would usually like to force them (but maybe not admins or some other roles) to reset their passwords.

With the UI as it is now there is no way to do this since you can only pick authenticated or specific roles. Ideally, and likely the most common use case, would be to pick all users EXCEPT the those in the roles checked.