Authenticate users biometrically or with a passphrase they already know.