[Zope] A possible bug in AccessControl.User