So method should be invoked by Super User access??
Then @Authorized( { PrivilegeConstants.EDIT_USER_PASSWORDS }) is not sufficent ?