add verification checks that event handlers are using the right user account type