Kerberos password change: what scheme would you prefer?