i would have gone with actual caching to get cross-request benefits as well, but this is fine for now. this is a great candidate for caching in that (i think?) we don't really expect to ever have to worry about invalidation. maybe that's not true for deleting/archiving users though...