What is the XML rule for Block sending modify-password changes to the Identity Lifecycle Manager password?

<rule>    <description>Block sending modify-password changes to the Identity Lifecycle Manager password</description>    <conditions>        <and>            <if-operation op="equal">modify-password</if-operation>          </and>      </conditions>    <actions>        <!-- Block all modify-passwords -->        <do-if>            <arg-conditions>                <or>                    <if-global-variable mode="nocase" name="publish-password-to-nds" op="equal">false</if-global-variable>                    <if-password op="not-available"/>                    <if-password mode="regex" op="not-equal">.+</if-password>                  </or>              </arg-conditions>            <arg-actions>                <do-veto/>              </arg-actions>          </do-if>      </actions>  </rule>