I think replacing the userid with an ID that isn’t reversible but keeps all the foreign key constraints is acceptable.