SU_LOGIN can either be a string or a callable