Ticket #183 - passwordMaxFailure should lockout password one sooner
Bug Description: Forgot to account for password policy subentries, and the legacy
policy was being disabled.
Fix Description: When creating a new subentry passwqord poliocy, set the default to
on, and then check if we disabled it.
https://fedorahosted.org/389/ticket/183