re-enabling locked user control, reporter tracking history of name changes, updatekeys and recov now use normalized username