My company has a 6 month probation period. It also has a 6 month password expiry. Because of all the SSO nonsense, it’s quite possible for it to lapse without warning.
It’s now a running joke that get locked out on the last day of probation, and you’re expecting a call from HR any minute.
CUPS facing the public internet sounds a bit crazy. Why would you print when not physicly near the printer?