You know, you're right about the ID verification - I didn't really think that through. You don't want your ID encoded with the ballot in a way that they can be associated.