you could write them at login time too, in theory