Change expire time on users, so they can log in and change password when changing through the web interface is no longer an option:

ALTER USER 'myusername' WITH VALID UNTIL '2011-11-09';