requestReset(ident username, string reset) {
  assume exists //accounts/account[username];
 
  assume not exists //accounts/account[username]/code; # account is already validated
 
  if not exists //accounts/account[username]/reset then
    insert //accounts/account[username]/reset;
  fi
  update //accounts/account[username]/reset reset;
}