A contractor's access must be automatically disabled after their contract ends on 2026-12-31. You have created their account 'jdoe' and need to configure the account so that login is completely disabled after that date, without deleting the account or its files. Which command accomplishes this?