Just read my own post and...
... I should correct myself.
Resetting passwords rather than maintaining a list (who wants to maintain that list anyway?) won't eliminate the possibility of an "overly-curious" IT person from potentially accessing data they shouldn't.