This is the way. If they can securely get you an address, then release the coins.