Move construction of defaults array up so that it can be used to
determine if the user actually changed anything that requires a callout to the scripts, and to determine if email needs to be sent. Remove change password indicator since the audit list sees that anyway via new "tbacct passwd" command. Change BCC/CC on the email. The informative email goes to the user only now (audit list gets the script mail), but CC audit whenever the email address is changed.