public boolean isCredentialsExpired() {
        return credentialsExpired;
    }
Returns whether or not the Account's credentials are expired.  This usually indicates that the Subject or an application
administrator would need to change the credentials before the account could be used.

@return whether or not the Account's credentials are expired.
core/src/main/java/org/apache/shiro/authc/SimpleAccount.java