Prevent enumeration of managed users through timing attacks

Prevent enumeration of managed users through timing attacks #2150