Comment 1 for bug 1651605

Provided this is an actual option somewhere, I think we should try it and see how many pitchforks it produces. I'm not sure how much really more secure this is, but it's probably not *that* inconvenient either.