If passwords have to expire, they should all expire on the same date so you can just change them all at once instead of having a ton of different passwords expiring at random times.