pull down to refresh

There are ways to do this in a way that respects privacy (Strike servers really need to just compare hashes of the secret material, they don't even need the secret material). But it's a big question whether the actual implementation will do that. If not, it will suck.