[Issue 9671] pwdPolicySubentry: no user modification allowed