o Reject senders that aren't the user that is currently logged
    in. Fixes #3952.