Right. At some point we need to decide whether the pattern should be to pass the user or user.id (per @singingwolfboy 's comment) and how to handle callers which don't have a user (e.g., command line invocations). If possible, I'd like to handle that decision either in the next iteration or in a completely separate story.