requestPasswordReset(email: string): Promise<void>
Emails a reset link to the account with address email, if there is one and
email is configured. It says nothing of what it did, so that the route
answers the same whether the address has an account or not. It sends at
most 3 links in a row per address, then one every 10 minutes.