changePassword(ident uid, ident username, string password) {
  assume exists //accounts/account[uid]/admin || uid = username;
 
  assume exists //accounts/account[username]; # implicitly true in OO implementations
 
  update //accounts/account[username]/password password;
}