[bonzini]

Still it's something like a second factor (or even, literally, overriding might require 2FA).