Should not display Forgot Password link when configured with Active Directory

On the Log In / forgot password dialogue for an Active Directory user, I'd like Confluence to detect that the ActiveDirectory is a read-only user-directory and display an appropriate message while allowing regular (read-write user directory) users change their password. Please let me know if you have solved this in a specific release. We are on 5.4.2.

Currently errors are displayed and end-users are confused. First comment is what the user sees...