DeleteUser doesn't need the priv checks, this is done at OpenUser time.