I suppose it's a good idea to make sure users don't get authorized for machines without certification.