Make Obfuscate configuration callback be passed a user as documented

8561063 provided a way for configuration options to obfuscate
themselves.  Unfortunately, while the documentation claimed that the
function would be called with a user, the implementation did not do so.
Correct this oversight.
Merge branch '4.0/obfuscate-currentuser' into 4.0-trunk