get_instance_user() returns None rather than throwing an exception

Callers must do something sensible, like using the instance's default role if a role what they're after