simple heuristic against private message abuse