Yes, I know this thread is a little late to the party.
However, if you're still running CMOD V8.5 and upgrading to z/OS V2.2 be sure to have the following fix installed:
PM50889 / UK73787
ERROR DESCRIPTION:
MSG BPXF024I (ARSSERVR) ARSUSEC.ARSZUXF ACEE release failed,
RC=00090002
ACEEtkn=2247A76825897EA0
when a user uses OnDemand to change the RACF password
Ed