Ticket #48943 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password
    
    Description: If the user entry has a pwdpolicysubentry, the configuration
    in the pwpolicy should be the strongest and respected.  If the entry does
    not have it, it retrieves the pwpolicy from the CoS Cache, which is the
    current behaviour.
    
    https://fedorahosted.org/389/ticket/48943
    
    Reviewed by wibrown@redhat.com (Thank you, William!!)