An audit trail for who's meant to be in this Organisation - and a place to open issues for security-problem users
For a real organisation, this repo should ideally be 'private', as it'll contain a full list of all vulnerable users in your organisation.