well I've tested and all 3 options don't work! Now I think you have the security plug-in as well don't you?
Maybe we need to see if it works on someones setup that doesn't have
OnAlert, as we know the e-mail thingy with it is flawed!
update: my test was flawed I was testing with a condition that wasn't met!
it seems to work using SMTP