Thanks, I'll give the trust system some thought. These are both systems that could be turned on or off per instance so I'm theory they could both exist. I was thinking that the instance administrator would have to be the one to prove the images for the captcha.