For anyone who’s interested in a quick and dirty way to do it, I just post the sha256 to Twitter/some public forum and reveal when I feel like it