A month later:

 - Everybody agreed, except one person whom I don't expect a reply from.

 - We realized that Redmine already leaks "the fact that someone (unspecified)
   posted a private note on an issue", so the question was actually
   only about the timestamp.