The utility watches the desk after authentication has already succeeded, a blind spot for a password prompt. External notification destinations deserve their own privacy check.