That occurred to me while writing my comment, as well, and I don’t like the implications.

I would imagine they have to ask you, yes. If the toilet can be flushed without authentication, they’d probably still have to ask you how.