Private messages linked to milestone: Subject line is not private

When you attach a private message to a milstone (private meaning for company memebers eyes only), members of *client* companies can still see the subject line of the message.

This should be considered a major security / privacy issue, since the company members would expect the message (content AND subject line) to be invisible to client members.