User management

needs a handle-malformed as well if this returns true.