core: add REMOTE_USER flag