Why do some “reset password” features specifically disallow you from changing to your (now remembered) current password? What’s the harm?