hmm, right... okay, I'll remove /thread but not /msg. requesting messages is different because you have to know the exact hash, it isn't revealing anything about the database (such as private indexes) other than having the message or not.