Restrict password changing for specific users