seems like pgp would solve alot of the issues around auth and confidentiality i think email is fine the way it is