Request a time-limited link without revealing whether an account exists.