Authenticated users can change the answers to secret questions through the OpenAM console.