r13631: Add DOMAIN_PASSWORD_LOCKOUT_ADMINS (this bit only allows to lockout