r23704: Add pam_pwd_expire feature as discussed on samba-technical.