Make sure username never is leaked