This would be an ideal solution for this situation, but the problem remains: if I cannot authenticate via the 3rd party initially, the service has no way of knowing that I am actually the owner of the account. I am not sure what the working implementation of this looks like.