Allow authldap to change password with ldap superuser only if necessary