I’ve been using Yubikeys as a two-factor authentication mechanism to make this harder