Have also activated the function in the opposite direction, i.e. not only sending secrets to customers, but also setting up a CNAME so that customers can send encrypted content to us via a website - great function and very elegantly solved