manage_users: add password expiry management