Hi!
Since SSPR only supports external breach database it is hard to enable this option for quite a good amount of users. Companies do not always want to send their users credentials to external REST APIs even if they are encrypted. I suggest an option where you could connect SSPR to local DB or at leaset send REST calls to API by your own will.
With kind regards,
Sebastian Novak