Look at all the keys in account-keyring, for each key:
- if the account is locked in LDAP, remove the key
- if the key is expired, consider locking it in LDAP
Consider automating this, or at least make it so automation wouldn't be harder, see legacy/trac#29671 (moved).
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information