and maybe `isValidUsername`?