The best/correct approach would be to add an additional option under Turn On/Turn Off:
Turn On Login Security
Turn Off Login Security
Turn Off Login Security/Allow Independent Password Reset Capability
This seems like an option that will pass approval. Typically new options go through a 1 month development testing period before they are added to production version releases.