requiring pwuid only if necessary