Thanks! I will implement this once the traffic from HackerNews decreases a bit (server is getting totally hammered).

Still there's no admin user configured so it's safe