I think this is the right track. Shared control is probably a requisite to avoid some of the bleaker possibilities.