may be omitted by
        the caller or ignored by the backend. Callers must use the
        returned username.
        N)