@schratze @owl @Flisk@cybre.space I happen to know that it's *supposed* to be possible, I'm guessing that someone was conflating "you shouldn't do auto-login, it's insecure [in my threat model]" with "you CAN'T do auto-login", see that sort of thing happen a lot in technical communities...