allow username to be fqdn; strip the zone before lookup