This is intended for users that don’t have TTY access, such as SSH sessions. Best used with a script that sets the auto reject marker on boot. There will be a server profile that comes with that by default.