> To update the passwords without changing pwd, the user can set a ctr on the client and increment it to change the associated rwd for a specific account.

https://dl.acm.org/doi/epdf/10.1145/3412841.3442131