sendmail 8.x.x allows user to rebuild aliases database

Sendmail up to recent 8.9.x versions - any user may pass -bi parameter to /usr/sbin/sendmail. This will result in aliases database rebuild. IMHO there's no reason to allow such things, but no matter - something rather stupid is done during rebuild: ...