We only do it for one-off age verification, not stuff that requires repeat authentication (those we simply don't use).