master: uid=pw-mgmt can change user password