Don't forget "business objectives" i.e. making it work, but be incompatible with other authenticators and claim that other authenticators are inferior. Classic Microsoft FUD combined with low quality of product.