I read something on Internet about this but I don’t know exactly how I must do.
Anyway, it’s a useful feature for users and also for admins.
It’s not a security breach for an Information System because of password requirements (complexity, validity, …) and most important, the users think they have control! 
Gabriel