This seems scary from a security standpoint. Do they ever enter their credentials or anything? Should we prompt them?