On a similar note, we get probabilistic login for services like Google, where sometimes, your typical authentication data is enough, but other times, you're logging in "in a suspicious way" and must "confirm" your account, typically by parting with some more of your personal data. There's a trade-off between security and availability, with no easy solution for it.