---
features:
  - |
    Added support for Keystone locking user option. Locked user can't change
    own password using the self-service password change API. By default, users
    are unlocked and can change their own passwords. In case of older Keystone
    not supporting this feature, all users treated as unlocked.