You are right, of course—as the Germans learned the hard way, no new cryptosystem can be trusted until it has been published, so that people like your Secret Admirer friends can have a go at breaking it. I would be in your debt if you would do this with Pontifex.