Co-Authors Plus uses a private author taxonomy to manage byline relationships to posts. Each term has the display_name, user_login, and user_email stored in the term description so autocomplete can search against it.

The best thing is probably not to expose private taxonomy terms without the appropriate capability.