Another possible way to add additional security control to self-hosted apps. Not sure if 2FA is an option?