Should handle_lpuser_as_username check to see if the given lp username actually exists?
Bug watches keep track of this bug in other bug trackers.