[389-users] Magic required for subtree password policy?