Checkbox to force user to change their password on first login

I'm considering two features here:

• A trac.ini configuration option for the default behavior of forcing a password change on first login (for the sake of discussion here I'll call the option force_pw_change). There could also be provided the ability to set the configuration option from the WebUI configuration panel.
• A checkbox in the create new users form that determines whether or not the user will be forced to change there password on first login. When force_pw_change is true, the checkbox will be checked by default, but will not be checked by default when force_pw_change is false.

The two features together will allow setting a default behavior, but still allow fine-grained per-user account creation control by the administrator.