This is a kind of thing which again raises the question of properly logging control. All logged out users would count as users in "control" by the Trebuchet.log(feature, result) call. We should think about this.