thanks. the first link makes the valid point that it's not that smart to run this code on the same machine used to access the service (if that machine is compr

thanks. the first link makes the valid point that it's not that smart to run this code on the same machine used to access the service (if that machine is compromised then the "two factor" aspect becomes a single, compromised factor). so i guess maybe what i was planning is not so good an idea. on the other hand, maybe it's better than nothing.