one scenario left in the garage that doesn't require email verification or service accounts