Get ready for a more than annoying "security" measure when you need a callback with a secret code to do things like redeem points. At least that is what I gathered from an email today. Just like banks...