All the other methods were named `actionSubjectOS`: `addUserWindows`, `addUserUnix`, `addGroupUnix`, etc.

How about renaming `_getUnixUser` to use the same convention as the rest?