Password recovery practice
Please see http://svn.cacert.org/CAcert/Support/PasswordRecovery.pdf .
Notes
Password recovery is managed by Support Officer. Formally, it is a practice documented in here, as authorised under SecurityManual#SUPPORT and Security Policy section 8. It is (no longer) on POLICY track as its own policy.