Was talking with someone about this yesterday. From cold start, for me to get to the VM I do my actual work on I have to

1. Enter a password to decrypt the computer

2. Enter a username and password to log into my account

3. Enter another set of credentials to access the corporate VPN

4. Enter another username and password to access the network the VM is on

5. Enter another username and password to get to the actual machine

6. And then navigate a nest of authorization for docker/git/etc to actually do anything useful