For extra shelter, we suggest turning on one or two-foundation authentication