Follow-up to #282. With "Allow Directory Queries" off, a regular user can only add someone to a share if they already have a connection to that person, and the refusal is the same whether or not the account exists. Applies to JMAP, WebDAV and IMAP. Principal/get now also answers for the accounts on the caller's own shares, so clients can show their names.