@davehull OK, that makes sense. Hmmm, require a unique credential per transaction? Too painful. Limited auth timeouts ala sudo? Perhaps...