_PASSWORD_NOEXP
*flags |= (_PASSWORD_NOCHG | _PASSWORD_NOEXP);
if (!gettime(&ti, p, flags, dowarn, _PASSWORD_NOEXP))
flag == _PASSWORD_NOEXP ? "expiration" : "change");