Given these difficulties a temporary queue of messages would be much more reliable and just as private, if auth was required from the get go.