With OpenACS 4 one approach to consider is to extend the users type (i.e. subtype it). This assumes that existing code that expects the user type properly calls the function that checks to see if the object's of type "user" or some subtype of "user", rather than explicitly check for an exact type match.
