Where the account holder does not set the password themselves, agencies must issue temporary passwords when system user accounts are reset.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.