protect against mismatched users.json files.