@simonw ok, I see -- we're not verifying emails or in fact doing anything at all with email