How is a CAPTCHA checked when a backend user resets its password on the backend authentication page?

backend-authentication, redirect, backend-user, observer, authentication, dependency-injection, password, password-reset, captcha, backend