Oh, and I missed the step that every invitation can only be used once because it includes step where the newcomer has to sign their pubkey into a message to the CCN's private key, and the relay will be setup to ignore repeat messages with the same invite code.