Why not just have it be the regular number, but the disk has a user id
for log in that security wont let go out on the web, only to a
predefined internal website with a cgi script or something to get his
real name, id, etc. Then let them download your full setup, then tell
them access will be granted in 24 hrs