This will not work if user is not trusted and has pubkey registered with hhvm