[donalhunt]

I agree that this is the most likely scenario. The rationale is to ensure awareness of an action that has risk of data exfiltration.

Though at this point, it's probably too late. :/