This generates a secret in your browser and registers its hash.
Prove you know the secret without sending it to the server.