allow 'Set own password' permission for Anonymous too in draft, so that it works in initial Credential Request.