Currently, it's possible to reset passwords for users that do not have any password reset by providing an empty key, which would match '' or NULL.
Tag::getCount was called without the third argument, causing it to count tags where kind \!= 'Person' instead of kind = 'Person'. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>