When you call up the change password dialog the current password edit is filled in. Would it be possible to at least make this an option? The way it is presently means that someone could change the current user's password if they left their computer unattended for a time.