Having `user` as an argument here doesn't seem like it would add much; anybody who is running code that could directly call this can either 1) Do much worse stuff, e.g. directly modify the filesystem, and 2) Lookup a superuser from the User table, and pass that in. (Same with get_dummy_organization above)