remove check that created_by or run_as is a (current) valid user