right, this is definitely something we have in mind. Why not require login though? Sounds like it would be tough to control without.