Currently, we just write a string, which is the creator/editor's current username.
Instead, we should write an object, with optional "account"
and required "nickname"
fields, so that abuse can be tracked across different nicknames that use the same account.