I want to prevent access from any user that is not specifically named as a user. It appears to me that right now, any user sending email to the magic email address can add an issue.
Note that i am only the project administrator. I do not have rights beyond the project.