Is this always set? Are there situations where `REMOTE_USER` will be set instead?