this should work for now - but if we wnt to be more exact, having a doc_type in there and checking user.domain for CommCareUsers might be more correct.