Throttle password reset attempts

I think it would be useful if it was not possible to repeatedly ask for password reset. Although unlikely, it would also deter brute-force bots.
Would anyone happen such a snippet? Its probably fairly simple by just checking the last date/time of `password_reset` and showing a message, but I thought I'd ask first.

Cheers!