Validate recipients at send time rather than when constructed.

Fixes #665