We could ask for your e-mail address and "real name" before we would reset your password. But I'll just be happy to not include the password in the "edit user" HTML code and to require that the password be reentered in order for you to be able to change it.

I'd also like to see https supported (which might also solve the "too many dirty words counted at the firewall" problem for particle). I have yet to even looked into how hard that would be, though.