Suppose I have users with a default password like "change-my-password" and I want to detect users who haven't changed their password and alert (nag) them about changing it. How would I do that?