Trying to edit password questions when they're already answered displays only one question, NPE exception in idm.log

1. using samples/objects/security-policy.xml
2. added reference to the policy to system configuration
3. created a new user in midPoint with End user role
4. logged in as the new user
5. clicked Reset password questions and defined answers to both (default) questions
6. clicked Reset password questions again. The popup displays (screenshot) with only one question
7. this happens on another user as well if he/she has already answered the questions. It does NOT happen if e.g. administrator clicks Reset password questions, because he has no answers.