It is a long story, we talked about it for a few days going around and circles and this approach is the best and most secure that we came up with. We tried to balance ease of use, and security at the same time. @samalba can talk more to it if you want more info.