Never generate a username stub that is too short.
Replicate zip validation in facade. Fixes #405.