AUTH_PWEXPIRED
as->state |= AUTH_PWEXPIRED; /* XXX */
as->state |= AUTH_PWEXPIRED;
as->state = AUTH_PWEXPIRED;
if ((authok & AUTH_PWEXPIRED) && lastchance) {
if (auth_getstate(as) & AUTH_PWEXPIRED) {