bsd_shadow: implement account and password expiration