Extract `expire_password_after` setting to instance method for easy override