[kapnobatairza]

I've had the same thought. When you vote the system can generate "duress" key for other candidates on the ballot. So you can technically "prove" you voted for anyone, so only you can verify which key is real.