Hmm, maybe I should double check so we don't post the "mbox_sha1" property for profiles anywhere. I don't like being able to match different accounts against email addresses. Especially when that data can't be verified properly anyway.