So, we are assuming that the message will explicitly list all the users that are allowed to see the message, correct? Would this scale to a site with 200,000 users and 50,000 users in a private group? I know those numbers sound extreme, but there are plenty of companies with that many employees. But I guess this same criticism could be leveled at our data model.