Now there doesn't seem to be any way of controlling who can reassign whose identities. There probably should be, as for testing purposes I was able to reassign other person's identity to myself, and I probably shouldn't be able to do that. This could have some security implications, even though I can't imagine any severe ones at the moment, apart from misleading people.