but technically we could allow either with like, a user type that also related to a service account type in the graph if you needed to query specifically for service accounts (e.g. in a lookup subjects) for some reason