What is the XML rule for Send e-mail on a failure when subscribing to passwords?

<rule>    <description>Send e-mail on a failure when subscribing to passwords</description>    <conditions>        <and>            <if-global-variable mode="nocase" name="notify-user-on-password-dist-failure" op="equal">true</if-global-variable>            <if-operation op="equal">status</if-operation>            <if-xpath op="true">self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']</if-xpath>          </and>      </conditions>    <actions>        <do-send-email-from-template notification-dn="Password Set Fail" template-dn="Password Set Fail" template-dn-dot-dn="o=Password Set Fail">            <arg-string name="UserFullName">                <token-dest-attr name="urn:ietf:params:scim:schemas:core:2.0:User:name.formatted">                    <arg-association>                        <token-xpath expression="self::status/operation-data/password-subscribe-status/association"/>                      </arg-association>                  </token-dest-attr>              </arg-string>            <arg-string name="UserGivenName">                <token-dest-attr name="urn:ietf:params:scim:schemas:core:2.0:User:name.givenName">                    <arg-association>                        <token-xpath expression="self::status/operation-data/password-subscribe-status/association"/>                      </arg-association>                  </token-dest-attr>              </arg-string>            <arg-string name="UserLastName">                <token-dest-attr name="urn:ietf:params:scim:schemas:core:2.0:User:name.familyName">                    <arg-association>                        <token-xpath expression="self::status/operation-data/password-subscribe-status/association"/>                      </arg-association>                  </token-dest-attr>              </arg-string>            <arg-string name="ConnectedSystemName">                <token-global-variable name="ConnectedSystemName"/>              </arg-string>            <arg-string name="FailureReason">                <token-text/>                <token-xpath expression="self::status/child::text()"/>              </arg-string>            <arg-string name="to">                <token-dest-attr name="urn:ietf:params:scim:schemas:core:2.0:User:emails.value">                    <arg-association>                        <token-xpath expression="self::status/operation-data/password-subscribe-status/association"/>                      </arg-association>                  </token-dest-attr>              </arg-string>          </do-send-email-from-template>      </actions>  </rule>