mask attack but with wordsets instead of charsets?

[dealloc]

Is there any way to perform a mask attack that uses words to replace mask tokens instead of characters? 

An example:

I know that a password is some combination of 4 words (plus some separators between each word). I'd love to just be able to have two wordlists:

cat words
first
second
third
fourth

cat separators
_
,
&

…and then be able to perform a mask attack with them—some equivalent to ?1?2?1?2?1?2?1

I have also researched combinator attacks and/or using/chaining various hashcat-utils to make these permutations but they all don't quite seem to add up to this use case.

Thanks in advance (or apologies if this is obvious and I'm just being dense ).