The Calendar Server utility cscal does not validate users before adding them to the owners list as secondary owners.
