That's the only way you're going to be able to ensure that everyone interacting with your site is a human. (It's preferable if you take a blood sample on every interaction, just in case.)