alas we need user rights to read the avatar apparently