You just created a new account for a contractor using useradd and set an initial password. Company policy requires that the contractor be forced to choose a new password the very first time they log in. Which command accomplishes this?