So using the user's phone just for auth, akin to cards? Nice idea!