http://lomteqnxehqjdemqgzse7xchjlusgnpoxq2fpmz3yuukyfzc22t5gwyd.onion/jira_projects/browse/LOC-10.html
There's already an element of having to trust a user is who they say they are - if user Bob joins, there's always the risk it's actually the authorities signing in as Bob. That can be addressed, to some extent, by Alice asking questions to verify the authenticity of Bob (i.e. only questions he would know the answer to) - at least, so long as bob isn't actively co-operating with those authorities.