Allow suppression of password changes.
Improve handling of expired passwords.