[otrs] password generation

One of the 'failings' of OTRS is the ability for anyone to create a customer account without any form of authentication. Would it be possible to adapt the 'forgot password' functionality on the agent login. This would match my requirements exactly. How easy would that be to do? Philippa Strange