I think that a simple prompt for user's password before doing this would be an amazingly effective solution.