The function should return all mailrecipients not only users.
Maybe it needs an argument to return only these that implement senderPolicyFrameworkWhitelist()
on request.
Also, it probably should return all of them if e.g. there's an alias to a user and resource at the same time.