Short of auditing, I suppose that something might be inferrable through dba_users.EXPIRY_DATE