sknebelZegnat: Them having *any* independent web identity is a good step, even if you can't automatically verify that it double-links to their social media (really, do we/you use that outside of rel-me-auth? I don't think I do in code I actually use (yet))
