Comment 4 for bug 349504

Here's a revised debdiff that corrects all the issues as well as makes the change in all parts of shadow (and properly displays the warning).

w.r.t. to pam and the expiration date, maybe we should also properly disable those fields and have no default set (I have a patch that fixes that by commenting out the relevant config lines in /etc/login.defs).

I guess the last remaining question is there anything beside shadow we need to care about?