Maybe it's possible to rethink or add a "shortcut" for the login mechanism. A simpler, guided method and the hard part is handled in the background leaving the simple part to the new user. Each witness could have this simplified system that they could deploy. The server will handle new logins with a procedure that is more practical from the outside. I don't know about it, I'm just a graphic artist, so I could only say stupid things or methods that are not feasible.