I'm not sure what permission controls the ability to introspect users on the same account but we'd have to check that to determine if it's a permissions thing or the user just doesn't exist. I'm okay with defaulting it to 404 until that's figured out.