[PATCH 3/4] Added <sub> sections to the deny_password_attempts rule for automatic substitution of correct value depending on profile.