But yes the client validation and key exchange is something non technical users don't grok :( Even though they've clearly spent a lot of time making it as easy as possible.