user to spy on is now configurable