Prevent CC'd email addresses from being created as contacts

with the GDPR in place this should’ve been fixed a year ago!