ALTER USER <foo> IDENTIFIED WITH <bar> was always marking the password
as expired regardless of whether the underlying plugin supports password
expiration or not.

Fixed by adding a check if the plugin does support that and not marking
the password as expired in this case.

Test case added.