I agree, any way to accomplish this without the email lock? I want to be able to trigger a webhook whenever a logged in user downloads something and know who that user is.