user management creates users, gets blacklist based on user.blacklist