I’ve just merged in my first attempt at this. I ended up renaming it to private_email instead of secure_email following some feedback from the team. I think the new name works better because it’s about keeping details private rather than actually securing email.
https://github.com/discourse/discourse/commit/bf9c4a7828c3c491a1f0cf3f33517806bb06c904
^ oops I just realized the commit message was wrong. The key is private_email despite that message which I cannot update now because our master doesn’t allow force pushes