Yeah, iris scan isn't safe either if attackers can get the authorized person in their control. Maybe using two random people from the crew would be best, hard

Yeah, iris scan isn't safe either if attackers can get the authorized person in their control. Maybe using two random people from the crew would be best, hard to find out for an attacker and still safe against "forgetting" the secret code.