they could sign it with their blind username, which is verified by company email