Forbidding password-restore by roles, not a username
Believe-remote-email option