(ITS#8762) Unlocking an account doesn't remove pwdFailureTime