DEV: Improve tests coverage when listing private messages. (PR #14385)

This is in response to the security incident published in

The security incident highlighted a gap in our test suite so we’re adding more test cases to ensure that personal and group messages do not leak between users in the future.