The secure email reset workflow is reserved for the email-service package. No password is ever displayed or emailed in plain text.