[Cthulhu_]

Exactly; a valid login attempt from abroad should trigger an immediate account lock and credentials reset for sensitive systems like this.