updates per-role disable password update protocol
don't do truthy check when settings sanitized value