We already send a notification when an account's SSH/GPG keys are added or removed. Also send a notification when the HTTP password is changed or deleted. This will alert the user if their account is compromised and the HTTP password is altered by an attacker. Also-by: David Pursehouse <dpursehouse@collab.net> Change-Id: Iaf0e7900c98f6e29b5d609fc7d43797e7e76d1ec