1. A method in a computer system with a processor and a memory for performing a local human verification ceremony, the method comprising: identifying an action to be performed on the computer system, the action being requested by possible malware executing on the computer system; indicating that the local human verification ceremony needs to be performed before the identified action is performed, the local human verification ceremony requesting user verification to perform the identified action on the computer system; creating a verification window that is digital rights management protected so that content of the verification window can be viewed, but cannot be copied or forwarded; presenting to a user for viewing a CAPTCHA challenge as content of the verification window, wherein the CAPTCHA challenge displays an image of distorted text, further wherein the CAPTCHA challenge requests that the distorted text be entered in a response input-text-box; upon receiving a request to copy or forward content of the verification window, suppressing the copying or forwarding of the verification window; receiving from the user text input into the input-text-box; determining by the computer system whether the text matches the distorted text; and when it is determined that the received text does not match the distorted text, suppressing the performing of the identified action; and when it is determined that the received text matches the distorted text, performing by the computer system the identified action.