Compare should fail since ds-cfg-lockout-failure-count does not exist by default
Re-write of password policy functional tests part 2