If the user is not available, it should fall back to the session key.