... this sounds like the "use random password, discard it, always log in via the email-recovery path" approach, applied to the physical world :-)