Yes, that's correct. You try to minimize the number of people who actually know why changes are being made. Those kinds of authorizations would come at a fairly high level. Then it would just be direction given to people who are processing the change, not knowing that in fact they're helping change the identity of an informant.
Often that can include providing the police officers engaged in the witness protection activities with an alternative identity as well, with different information that they can use for a driver’s licence, for example, or vehicle registration. It's to try to mitigate the risk of these interested parties being able to track the officer's activities while they're engaged with the informant.
It's almost like a dual life that people engaged in this type of work need to lead, so that they can, as Mr. Townsend indicated, keep a completely separate life between their professional activities and their personal activities.