response.allowed_puavo_users may have different types, handle that.