Via HackerOne. I don't think this has meaningful security impact, but you can add things like wiki pages as Conpherence members. We should probably provide some `ConpherenceMessageableInterface` and only permit objects which implement it to be added.