Bah.  I hadn't even thought of that.  OP_CHECKSIGVERIFY is going to check the signature against the transaction, not the supplied data.  Hmm.  Maybe not possible after all.  Going to have to really think about this one, but I'm much less confident all of the sudden.