allow empty username, and determine using pname_to_uid