This is preparatory work for settings controlling who can see user emails; it includes the API-level support for editing it, but no code to actually enforce the policy.