password manager user restrictions