email notification content privacy by default (unless it's public content)