Turn off the ability for users to have a password hint

I am working on a security setting for my company that requires users to not have a password hint. Since we have several users that either 1. ignore our security options and 2. purposely go against ones they don't like, I need a way to turn it off in terminal for 10.13-10.15. I know I could create a script that pulls the User lists, and repopulates the opendirectory command to insert a 'blank' password (dscl . -merge /Users/username hint "password hint"), but I would like to turn off the ability as part of the setup. I have scoured the Internet and found nothing so far. Does anyone have any suggestions? PS. I also want to build a profile for it, but we are a ways away from profile management but any suggestions on that would be helpful as well.