`edit_user` is a capability: https://codex.wordpress.org/Roles_and_Capabilities#edit_users
Should I check that AND check edit_user too, with the ID, even though it's not a built-in capability?