The list of validUsers is hardcoded at https://github.com/golang/tools/blob/master/godoc/dl/dl.go#L317. This means that every time someone is doing a release for a first time, we need to make a CL to add them to this list (so that they can run the release command) and redeploy golang.org.

We may want to store this list in a more dynamic way.