what security measures does microsoft take regards recycling email address, especially in regard to notifying companies that use email addresses in IT applications as a user contact?