public void setCredentialsExpired(boolean credentialsExpired) {
        this.credentialsExpired = credentialsExpired;
    }
Sets whether or not the Account's credentials are expired.  A <code>true</code> value indicates that the Subject
or application administrator would need to change their credentials before the account could be used.

@param credentialsExpired <code>true</code> if this Account's credentials are expired and need to be changed,
                          <code>false</code> otherwise.
core/src/main/java/org/apache/shiro/authc/SimpleAccount.java