could do add'l validation, i.e. the same that's done in CertifiedUserManagerImpl