For anyone wth admin.pl access, it would be good to
have a slightly paranoid setting to revent unauthorized
Maybe instead of a persistent login, this would ask for
password confirmation (or check up on secret facts)
every 5 minutes.
"what city were you born in?"
"which of the following is the name of your youngest
This would be annoying when at a home / office machine
used on a long-term basis, but it would be good from a
machine where this isn't true ...