Add configuration option to set initial password expiration

Add configuration option to set initial password expiration

Add a new per-instance configuration option to set the password
expiration time for newly-created principals.  Be aware that this only
controls the initial expiration period.  After the first password
change, further expiration periods are normally controlled by the KDC
configuration or policy.