Good point.   I was reading too fast.   I thought he was saying he didn't want a Mid on the Internet.   Another alternative (a bad one albeit) is to use the legacy authentication methods.   Oh well.   He's going to be using a VPN it looks like