FWIW, taking this in rather than overloading `opts` was done after it was found that `opts` was dangerously being passed into `createUser` as profile data. It's needed only for user import.