Secure email mode

this is now complete per: