[Catalog-sig] Mandatory Reset of PyPI Passwords

["Martin v. Löwis"]

> Besides, keep in mind that many people will never explicitly login into PyPI,
> they simply use "setup.py upload". As someone mentioned, their account might be
> tied to an e-mail that isn't even valid anymore.

I was planning to perform regular email verification for all users of 
PyPI (starting with the active ones). I guess I should start doing so now.

Regards,
Martin