I feel that an explicit assertion and checking that the user can be listed is required to make it 100% fail proof.