That would be very bad, because then none of our endpoints that don't require a `_user` parameter wouldn't work. This plugin, by necessity, intercepts *all* requests.