- query media by hash
- media upload
- account registration
  - use email for confirmation and reset, but don't store email; instead
    store a crypt(3) of it
- search function