Not used at present, but it is a vital integration point for generalized password expiration capabilities. A warning is any important message returned from a handler that did not prevent authentication from succeeding, for example, impending password expiration. I would like to see whether we can make the warnings work for the existing LPPE use cases, and extend/tweak as necessary if they are not adequate.