The configuration can actually be found here `/usr/share/adduser/adduser.conf` in the `NAME_REGEX` key. Should we use this regex for `debian:packageBin` to check the normalized name, at least to give a warning "_this username may not work on a debian system_"