If they report the new user, that probably will work breaking the X rules for "impersonation". Well, probably..