expiring-password intercept flow configuration

[Cantor, Scott]

> Was this omission in the config deliberate, and if so, why?

The omission is due to you having upgraded from an older release that didn't include that feature. New features that depend on changes to protected configuration files can never automatically be assumed to work. That's why we provide the latest files for comparison after any upgrade.

The flow descriptor lists are the most annoying part of the current configuration from a feature deployment point of view, and will probably get a review in V4.

-- Scott