Make getpwnam_alloc() static to lib/username.c, and ensure all username lookups go