Clarify the removal of key-pairs on password change

Author: valendesigns

wp-includes/rest-api/auth/class-wp-rest-key-pair.php

@@ -264,6 +264,10 @@ public function after_password_reset( WP_User $user ) {
 	/**
 	 * Fires after the user's password is reset.
 	 *
+	 * When a user resets their password this method will deleted all of
+	 * the application passwords associated with their account. In turn
+	 * this will renders all JSON Web Tokens invalid for their account
+	 *
 	 * @param int $user_id The user ID.
 	 */
 	public function profile_update( $user_id ) {