So you give your users the root password so they can change the password them-self....oversimplification often solves just a small portion of a bigger problem.