Use the automatically generated reference and the request email.
The reference and email protect access.