Still not convinced that sharing a link will be secure enough for the initial audience of lawyers, educators, researchers that you had in your user stories. Would having the link illicitly allow you to view the annotations without being detected.