bugfix: set new-user attributes even when trust_authname = true