Require specific permission to search for users

In RT 4.4.2 the url User/Search.html allow to search all users and see their personal info (username, real name and email).
This page expose personal info to gui users without permission check.
A new permission to see users, or a filter by users of same visibilities maybe useful…
I ended blocking for non admin users:
unless ($session{‘CurrentUser’}->HasRight( Object=> $RT::System, Right => ‘SuperUser’)) {
Abort(“You don’t have permission to search for users”);
}
I hope some kind of verification is included in future versions of rt…