Can we just blindly split here? Don't we need to make sure the key is what we expect (uid, etc)? Also, if they don't provide a Get-User stanza, aren't the values we get here the actual user ids, in which case we wouldn't want to split? Should we pass the whole value into get_user, and let that function decide whether to split or not, and how to extract key/value pairs for the Get-User filter if needed?