I think this is the best way actually, and I've thought of it for the startup I work for, it'd be a really good authentication technique which could replace the

I think this is the best way actually, and I've thought of it for the startup I work for, it'd be a really good authentication technique which could replace the password for support transactions with less/none of the security implications.