services/autocloak: don't autocloak people bursting with an account name