Wow. Can anyone duplicate this behavoir? This sounds like a pretty big security risk ... there should be some way to prevent that.
Separate names with a comma.