The People Picker (used by the sponsor field with a sufficiently large number of potential sponsors) does not currently permit access by standard CO members (see CoPeopleController::isAuthorized). Are there privacy considerations in enabling this (in which case we probably need a CO Setting), or can it just be available by default?

Note for comparison, currently any logged in CO Person can see all other CO People (within the CO) by creating a new CO Group.