If one could specify an _alternate_ email when creating mailboxes then these could be used for password resets.