'Are password changes allowed?
- set to False if passwords are being managed externally (OpenID / SMTP / LDAP)'

def get_auth_password_changes(self):

    return self.auth.get('password_changes', True)
