Ah, that's worse than a mere privacy issue! Good point. I was thinking merely about anonymity. Both can be largely eliminated by having per host or per organ

Ah, that's worse than a mere privacy issue! Good point. I was thinking merely about anonymity. Both can be largely eliminated by having per host or per organization Identities and using IdentitiesOnly.