I'd recommend adding a security token as well (either software or hardware)