This doesn't immediately require pg's input - generate a sufficiently unusual string per user and authenticate only the users that have that hash in their HN 'about' page.