finally a security-conscious approach from ms - this is exactly the kind of move i've been screaming for https://www.reddit.com/user/CircumspectCapybara