Think of it as two-factor auth for people