[389-users] global passwd policy for DS with existing users