And the censor Aaron's address wouldn't be in "To" on the messages he "observes". (What an awful company to work for!). But, obviously, he wouldn't be able to if he was a target of a mass-nmailing, or that was one of his, ghm... colleagues.
The best solution would be to have a separate, "functional " account for the censorship role.