switch to user ndb hook for deletion ownership check