kbsben_thatmustbeme: re the change-link scenario. So someone is likely to "know" me from my g+ (also twitter, etc) accounts. If they don't know me other than my web-site, then yes - there's no way to 'authenticate' it unless they know me in another way
