--with-pam and expired passwords

[Mordechai T. Abzug]

First off, thanks for the --with-pam fix that lets users with expired
passwords change their passwords.  It's wonderful, and has finally
allowed us to migrate to openssh after a couple of years.

Problem: after openssh allows a user with an expired password to log
in, said user does not have any X11 and agent forwardings that have
been set up.  This can be a support issue for naive users who don't
understand why they can't run X programs.

- Morty