only allow primary emails