ucount: Make get_ucount a safe get_user replacement