Suff and I obviously think and act similarly to these types of calls.
Them authenticating me is meaningless for my security, it is me who wants to authenticate them. If they will not play ball we go our separate ways. It is no problem for me to ring a publicly listed number and ask them what they wanted.
But well done, Aggers, you got rid without giving anything away.