[Zope] clean way to change AUTHENTICATED_USER?

[Kyler B. Laird]

My users need to login with a simple alias ("kyler")
which could change.  As part of the (PH/X.500) login
procedure, I want to set AUTHENTICATED_USER to a
better ID ("kyler.b.laird.1").  This will allow the
users to continue to change aliases at will without
necessitating ownership changes in Zope.  (I've done
this for years under Apache.)

I'm using LoginManager and a PH kludge I wrote to do
the authentication for now.  I realize I will need
to continue to use the alias (as supplied by the
user) for indexing there in orcer to use the cache.
I just want everything else to see the full ID.

I don't have a good grasp of The Big Picture yet, so
I'm hesitant to jump right in and add a setUserName
method.  I'm hoping there's a better way.

Any suggestions?

Thank you.

--kyler