Your settings are correct and should work.
Reading your questions, you say that the message is still the same. Is the validation still the same? Because the message should be set in the i18n files with the message code
command.password.error.strength
If it's only the message, this should do it.