SECURITY: Avoid integer overflow on too many recipients