use owner, not options.owner

because it might be options.username, but that's resolved earlier