You should password protect the admin directory so that they can't even try the reset. You'll have to log in twice, once to access the directory and once to enter your admin login info, but it is much more secure than leaving it open to the world.