As for me, I still think software-based steganography is the answer. If you can't detect it, you can't prosecute. For instance, how many people do you think are fired from their jobs for LSD on their drug tests...? Far fewer than do LSD, according to people I know in Silicon Valley who say that certain mil subcontractors are infested with acid-taking Deadheads; because LSD dissapears from the bloodstream a couple of days after you take it.