The right person. Every return.

Add appropriate checks when someone returns, recovers an account, or takes a sensitive action.