SECURITY: default recipients_max to 50,000