which login(1) detects and forces a password change during login. Based on [bin/936] by Simon Gerraty <sjg@quick.com.au>