based on the username model though, wouldn't there be a great deal of impersonation potential? What would stop someone from firing up 18 diff instances and using your username / avatar with a diff domain name - would be confusing/frustrating for ppl trying to find the 'real' you, no?