explain why sender confidentiality isn't a feature