How to force password change on next login and set expiration policy for passwords/API keys

Hi Paul,

Thanks for the great plugin!  We're currently using it for one of our open source projects.  I was wondering how to set an expiration policy on user passwords and API keys as well as being able to force a user to change their password on next login.  I recently inherited the project and don't have experience with caddy, so I'm probably missing something obvious.

Thanks,

--rob