Client expects response to change-password extended operation