(usr-tc) anti-spoofing, per user