downside is that if their membership changes and they haven't logged in again, it'll be "stale"