Add tundra.user:current for returning the name of the user invoking that invokes the service