Password expiring warning with AD

[Cantor, Scott]

> Yes, that does look simpler, and the already-notified cookie is very nice. My
> head hurts trying to parse AD pwdLastSet but it works with a contrived static
> YYMMdd attribute.

I was a little surprised joda-time didn't have a parser built in for that, I think we'll have to eventually add something to the predicate class.

> I also got this... I guess 'resultIfMissing' is another upcoming 3.3 feature? It
> "works" if I remove the property.

Yes, it's a code addition.

-- Scott