The user id might come from an external provider in which case we can't make assumptions about its format. The constraint removed here is breaking the credential APIs for ldap-based clouds. Change-Id: I80dfe07ae48fd08de3af9cf5508215e4bbcea13c
region