Hmmm. I don't see this as being a problem. We could do a general thing where if the security of the entry is not public, you check the xpost accounts.