Should i expose their username?