Still not getting it, I mean, if you've got the pass you've got the pass, no way around that. You don't go through email if you've already got their word, and if you do, they'd be receiving an email anyhow.
Only thing I can think of coming out of this (maybe I'm wrong?) is URL manipulation with a fragile new system to grab passes, which'd be a good thing.