Wait, the user might be mixing terms from different contexts. For example, a device kit (like a Dev Kit) for an HMD might require authentication via username and password, possibly through a link sent to the user's email. Or perhaps they're referring to a setup process where after purchasing an HMD and device kit, you register using a username and password, and access some resources via a link. Maybe there's security concerns around sharing such credentials.