Fixes #6870: prevent hidden users from being shown.