add svc_acct-no_edit_username config, RT#13416