...and therein lies the crux of the matter. The solution cannot be based on something that people are not allowed to use in all circumstances. I am often on client sites where I would be immediately escorted offsite (after a serious grilling and an inspection of the machines used, if not me physically) if I tried to install software or plug in a USB key.

I thought that a federated security system would do it but no. Every site has to hand roll their own security.

To keep the theme going the password that I use is "1fY0uB3l13v3Th1sTh3nY0uAr3..." 😉