In this situation I prefer the lack of programming!

Usually when its time to update, I get an email telling me it time, then within 2 weeks of that email, I get a forced pw rest in the current year.