If an admin forces PIN length=4, then when setting up the PIN we show these strings:

- [0,3] digits: "PIN must be at least 4 digits"
- [5..] digits: "PIN must be less than 4 digits"

Do we want to add a special case here and check if the policy min/max length are the same, and show, ie,

- [0,3],[5..] digits: "PIN must be exactly 4 digits" (or something similar)