SSH certificates can sign a key with an expiration, thats a bit different to a password.