Signed in with a magic link.
One public URL in, one target out. Senders never choose the destination.