yea. I'm pretty sure they want separate authenticator app or browser extension