I’ve come up with an alternative method that I believe stays secure - please review and let me know what you think: