What you really want is https://meta.discourse.org/t/latest-on-encrypted-personal-messages/110465. Looks like it’s not quite ready for primetime, but having PMs that cannot be read (even with access to the database) except by the intended users is on the road map.