Respect privacy lists for incoming PEP messages