rename user state to 'expired' for clarity

Expiring a Unix account prevents any kind of access, and so seems
more appropriate as a *user* state change compared to locking,
which only prevents usage of the password.

But, since some admins will expect this less stringent behavior, I've
renamed this state to be clear what the usermod command will do.