create-user: don't create .forward: we read straight from .public/.forward now