Works for limited use case, but doesn't cover when you are doing UAT and you do not want to add every tester to SP as a users, think Mobile devices much less grant access to change things. SP is solution is handy (thanks), but a better and advanced solution seems easy enough to simply exclude IP address/range.