Add flag to exclude specific characters from generated password

[atc0005]

I ran into a case on Windows where the Windows Command Prompt refused to properly handle a single quoted password as-is because it contained an & character. I opted to keep the generated password and use PowerShell instead to call dmsc.exe, but it would have been useful to just exclude that character from the potential character set.