[feature request] LocalAD - make sync password with AD optional with preference key

[bamtan]

To avoid issues with password sync across various devices, we use our own system for password resets. Having the option to disable the XCreds AD password sync (Change Password prompt) would be beneficial.

Suggested solution:

• New PreferenceKey e.g. AttemptADPasswordSync (set to true as default?)
• If set to False; when user with expired/pw change required, deny login with message "Password is expired or requires change" and no further action until PW is reset on a separate system.

Note: XCreds should still do the password reset/silent overwrite since the PW is changed.