when an notification email is sent for permission assignment to a group, all users' email address should not be put in TO for all to see

When assigning a permission to a group, an email can be sent to notify all members of the group. the TO field is filled with ALL the users' email addresses, which divulges to all the recipients the email address of all the users member of the group to which the permission was assigned. It should not be