Krikri::PluginHelpers::UserState::ShadowAgeing

/etc/shadow's own password-ageing fields (min/max/warn - the 4th/ 5th/6th colon-separated fields), for password_expire_min:/_max:/ _warn:'s idempotency check. Real Ansible's user module sets these via chage, a separate call after useradd/usermod - neither supports password-ageing flags directly (usermod's own -m means "move home directory", not "min days"). nil for a field the account has no value for at all (a freshly useradd'd account with no -m/-M/-W-equivalent given), matching a missing param's own nil.