Private catch-all inboxes

Verification codes without inbox clutter.

Generate private aliases, receive verification mail, and keep every code scoped to the user who created the inbox.