Restrict possible watchers to project members in any case

https://www.openproject.org/work_packages/3108