You could use the finger command on users and read their .plan files even earlier than that. Quake developers were famous for those. https://fabiensanglard.net/fd_proxy/doom3/pdfs/johnc-plan_19...