What we need to do is make sure they have their db admin access configured for at least dual auth, 3 of 4 even better