Require password expiration only if advanced security is enabled.