[support] Can I prevent user from changing his password?