I think you are right but I see 2 challenges: Your requirement first: password forget : maybe - in that case , lack of functionality - the admin...
But this is not compatible with the DSGVO. At the moment you can not use ispconfig for production ! If a mail come in it should get a signature...
Separate names with a comma.
