SECURITY: rebake old user profiles