At my employer's behest, I'm writing a module or two to stiffen the security in drupal's core.

As part of his grand scheme, he wants me to completely wipe out the Request New Password functionality from the main login page and the my account page.

Given that I'm still a drupal n00b (though a well-seasoned php coder), I'm not sure what to "unset" from within my module code in order to achieve this. (Or if maybe there isn't an even better way...)

Any ideas?

Thanks in advance.

Steve