Ask for captcha verification or other form of verification before hiding the account? This is what the author suggests in his last email to Github, and it sounds pretty reasonable.