Often times there is a requirement where the business would like the user to enter their username and password to confirm an action. Much like adding a digital signature would.

A new rule for this (or control) would help cover most these scenarios. Ideally it would work like the Confirmation rule, and possibly with some output to confirm it is the current user that completed the confirmation, and the date. Although, this might be able to be added in a ddtionatl rule.