Creation of bounties through Customer API leads to private email disclosure