Allow users to change their own password, but nothing else (no search, no read, no write) This will only run when setting up the 389-dirsrv instance for the first time, this has been applied on barnard by editing the dn (see #128 (comment)) Closes #128