It would be a good idea to encourage the user to pre-authorise the necessary security stuff before the call is made, I think.