The approach that I am taking here is to have all the user accounts on the mirror instance(s). The idea would be that the people running this should at least get an okay from the “mapped” communities, and any admin that is concerned about the legal aspects of this can simply defederate from the mirrors. I will add that to the docs.