When a project admin adds a userhandle as member of a project, don't add immediately. An email should be sent to the user and he should confirm before he gets added. If we ever allow a flag so world relam project user emails can appear in search, there can be abuse without this.