User: Make sure force_password_change can only be activated if allowed