regarding force reset: all the passwords now do not work, users just have to do a password reset flow (and potentially set the same password again)