Rather than simply controlling ability to launch a task via permissions, I would like to require the user to enter a password to deploy to certain environments (Production specifically.) This would help us with compliance issues as it would provide two factor authentication to deploy to production environments.

One justification for this is that an administrator of bamboo may not necessarilly have permission to deploy to production, but it seems that they are automatically granted full rights.