We want to provide additional security around the security preferences page where the user can set password, etc. by prompting the user for a SAC before navigating to the security preferences page.

We initially thought to display an intermediate extension that will check a SAC when the user clicks on the security preferences tile (see attached screen shot). After the user entered the SAC, the intermediate extension would allow navigation to the security preferences page.

However, there is a loophole in this solution. If the user navigates directly to the security preferences page (by a bookmark or entering the URL), then the intermediate SAC extension would be circumnavigated.

How can we protect the security preferences page with a SAC?