Popover-vcard exposes user profiles when logged out users are set to not see profiles

[samuk]

I have user profiles set to logged in users only.

When browsing the dashboard as a logged out user I can see the user profiles of users who have posted or commented in open spaces using the Popover-vcard

Not a huge issue in my use case, but could be in others.

Example browse https://vive.transitiontogether.org.uk/dashboard and hover over users

Then try to visit https://vive.transitiontogether.org.uk/people