This is where I want to go with UCP, password resets and regenerating passwords and temp passwords, etc. So yes great points!
Something I am really not sure about is we are slowly needing a way to store passwords in the database, not in plain text but through some encryption that can be decoded. But thats also bad, the problem is for things like XMPP and BRIA we need to send the password to those services in plain text…