Actually, looking at the code, it would be better to have the aor specified always, as there looks like there is a long standing bug in the code caused by this slightly quirky API, and it would avoid having to call served_user_from_msg.