Auth could be improved - hasn't somebody leaked an NSA public key from another application that we could install? Other option would be opening it to government IP ranges.
It should tweet it and some identifying characteristics that way the NSA can simply use their Twitter integration to locate and destroy the target. No need to make this complicated.