I didn't mean to imply that it's intentional or that it
should be this
way, just giving you a hand with the analysis. I have some changes
around this area of password policy that aren't committed and might
complicate a potential fix, I've filed a bug for you to keep track:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216522
Ah, I see, thank you. You can see in the logs that an extop password
change doesn't see non-global policies as you just see a high-level
message that an extop operation was performed and that's all.