This is probably safe because I _think_ all we ever actually use in the Connect code paths is the `username` field.