That's a great idea. Authorizing any kind of physical change should be a default security measures.