Don't use USER env variable...it cannot be trusted.