Registry lock - two-factor or intervention

I have some questions for you. 

I'm aware of two separate approaches to registry locking

1.  Two-factor authentication of change requests, where the registrant is expected to hold one factor and the registrar pass it through.  Using something like SecureID.

2.  Intervention, where the registry is expected to verify a change request out-of-band (or the registrar pre-empts this with a out-of-band unlock request).

My questions are:

Q1:  Does anyone have an EPP extension for handling 1 above that they would be willing to put forward for wider use?
Q2:  Is there any role for EPP in 2 above?

thanks in advance for anyone taking the time to reply!

cheers
Jay

-- 
Jay Daley
Chief Executive
.nz Registry Services (New Zealand Domain Name Registry Limited)
desk: +64 4 931 6977
mobile: +64 21 678840
linkedin: www.linkedin.com/in/jaydaley

_______________________________________________
provreg mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/provreg