The password-to-modify misfeature does not actually provide any
security, but it may induce users to re-use passwords, so at least make
it harder to crack the passwords.

Change-Id: I0adf0e8e11b222fc469013e17a2695bd7122ad01