Heh, maybe we need to make a 2FA device with biometrics and GPS, where it's setup in person the first time.