Reported in https://github.com/jenkinsci/matrix-auth-plugin/pull/63 the cleanup of User#get(String) introduced a regression for security realms that could contain users that have not logged in to Jenkins.