As the prompt is security-related in the first place, you might as well treat the response with the same amount of security as you would with a password, and make double sure that it goes to emacs, on all systems, and not somewhere else.