What is the XML rule for Block sending modify-password changes to the NDS password?

<rule>    <description>Block sending modify-password changes to the NDS password</description>    <conditions>        <and>            <if-global-variable mode="nocase" name="publish-password-to-nds" op="equal">false</if-global-variable>            <if-operation op="equal">modify-password</if-operation>          </and>      </conditions>    <actions>        <!-- Block all modify-passwords -->        <do-veto/>      </actions>  </rule>