Ah. Thanks. So the idea is to stop the user before they get that far, I suppose.

Doesn't this hark back to "If the attacker has local access, it's already game over"?