Dunno why we don't rely on signed messages; It would solve this problem
of impersonation and SPAM. Set up a web page for users to upload their
signatures and force all users to use it..