ChangeUpdate: Sanitize identity in Submitted-with footer

We already sanitize names and emails elsewhere, but missed this one.

Change-Id: I55abb96504c9b9f5b7d8dc7f221fb27c4c5885c5

gerrit-server/src/main/java/com/google/gerrit/server/notedb/ChangeUpdate.java

@@ -646,10 +646,8 @@ public class ChangeUpdate extends AbstractChangeUpdate {
             addFooter(msg, FOOTER_SUBMITTED_WITH)
                 .append(label.status).append(": ").append(label.label);
             if (label.appliedBy != null) {
-              PersonIdent ident =
-                  newIdent(accountCache.get(label.appliedBy).getAccount(), when);
-              msg.append(": ").append(ident.getName())
-                  .append(" <").append(ident.getEmailAddress()).append('>');
+              msg.append(": ");
+              addIdent(msg, label.appliedBy);
             }
             msg.append('\n');
           }