Good idea, I would add a yubikey to that, for an additional step.