As I said to kojacker, next time we can/should use the token-based mechanism we use for council elections (every eligible voter gets a token and mail invitation at the start of the voting, the vote count is not visible until results, etc).