determine if the user actually changed anything that requires a
callout to the scripts, and to determine if email needs to be sent.
Remove change password indicator since the audit list sees that anyway
via new "tbacct passwd" command. Change BCC/CC on the email. The
informative email goes to the user only now (audit list gets the
script mail), but CC audit whenever the email address is changed.