Should be at least on request only so you have to have a valid reason to request it so spammers can't get it.