SWC-440: from code review - clear private fields at the service level.  add unobfuscated email address as prefix key for item, enable finding a user by email address