what option should I add to my useradd command such that when the user logs in for the first time he's prompted to change the password or something?
I was thinking about this, but not sure if it's the right option:
useradd -K PASS_MAX_DAYS=0 username