Should probably also check in knife for well-known user names like administrator and guest -- they should not be able to use these.