user-accounts: Don't allow opening non-images

We need to be able to load it, otherwise it's not something we'll support,
and can use.