enhance notification mecanism: recipients may return user entities, which will be used to create a fake session so one can check security during notification if necessary
Experiment with the search bar. Try queries like "card sometextualcontent" or"card wikiid index" or "345".