Better credentials page is needed, both for self-service and user administration.
The self-service page should probably have several tabs for different credential types (password, security questions, ssh keys).
The admin UI should have separate credential tabs as well. There should also be a place for management of nonces. But those pages may need to be slightly different (e.g. consider password distribution)