lol, 4th :)

Yeah the basic idea is there I think, changing the active/owner key could be part of the process, and then some kind of verification - email sounds like an option.

Cheers, let's see what comes of it...