Is it a security violation to show a directory of users?

[eviltrout (Robin Ward)]

Here is the functionality that @codinghorror mentioned:

https://github.com/discourse/discourse/commit/2cc585816369afd2f1b0266615d78282a0a99ad8

The new site setting is called enable_user_directory