Make the bcc field optional

When entering a mail address in the bcc field a copy of each and every mail is send to that address. Though that might be useful in some cases, it also can lead to a data breach when used wrong.

It would be good to have some option to enable/disable this field. Preferably based on ACL, or otherwise with a switch in the backend.