We're using ->generate_userid followed later down a script by ->store in a number of places. This is a race condition whereby we could inadvertantly end up with duplicate userid's on the system.
This doesn't appear to have ever really hit in real life.