laptop: annotate functions.php with good comments;
send secretkey with sig confirm or reconfirm to enure authenticity, only delete key when saving post;