On the last point, I don't think that is a huge problem. If you are doing one-off tests, then you could just automatically send them as "gift wrapped" which leaves it open to interpretation whether they used it or someone else used it (as long as you don't store PII)