[doctorpangloss]

The flaw of the cooldown solution speaks for itself.

[bonzini]

Still it's something like a second factor (or even, literally, overriding might require 2FA).