code: @Restricted(NoExternalUse.class)
      public User getUser(String id) {
          return User.getById(id, User.ALLOW_USER_CREATION_VIA_URL && hasPermission(Jenkins.ADMINISTER));
      }
docs: This is to map users under the security realm URL.
  This in turn helps us set up the right navigation breadcrumb.