user is the name of the user as seen by the kubernetes cluster, example "alice" or "alice@domain.tld"