Consider adding a feature to keep user's email addresses private _everywhere_

We currently allow users to set their emails private on their profile, but emails are still visible on commits.

GitHub has an option to anonymize a user's email which works immediately from web-initiated actions, and also tells the user how to set up git to use this 'email mask'. We should consider whether something like this would be useful to have