* tests/run-tests: leave some time between expiring of passwords and attempts
    	to check if they've truly been expired, in case the server
    	implementation considers expiration time to be the end of the second
    	instead of the start