fn account_key(user_id: &UserId) -> String
One bucket per account regardless of the case it was typed in, matching the lowercase fallback the password check itself applies.