Tag
Clone the PIN-entry UX, not the auth: a custom keypad with dots-not-digits, server-side verification, lockout, and authorize-with-context.