Depends on D13759

implement the RPCs introduced in previous diff. we check in both RPCs that the caller is staff. then we just run OPAQUE registration with the new password and replace the old one

tested at the end of stack by calling RPCs from keyserver script