user: local users are always AP-enabled (closes #316)