I like the

namespace

concept better. You're not creating a resource on the user, but in the user's

namespace

.