namespace mask per user (thanks @jerith)