Hadn't thought about it that way.
It's sounds good enough to me that I may set this up myself on my existing systems - I'll leave my day-to-day user account out of it, though. No, I don't trust my 'fumble fingers', and I detest the 'oh-shit-second'...