Many gov sites allow one or the other. Really neither is a good solution. Is it "safe" to have everyone in the country, citizen or not, in possession of a login on a .gov site?