Yeah, it would be nice to see some protocols to do just that, implement authentication over cleartext messages in a way that's compatible with the rules, and then wedge that under some useful apps.