This sounds like a good option. It's along the lines of their original approach, and by adding the friction and personal contact of an email, much less likely to be abused.