This is a straw-man argument. A public service that can answer whether a one-time key provided by the user to the service fulfills a certain requirement would suffice.