When you say you have no solutions for change-pass, what exactly is the stumbling block here.

As for RPC guidelines, they match the same guidelines you'd have writing a native API as a set of interfaces. You already know how that works. Just apply it. If I'm wrong, let me know what's the issue.