the problem is stating ~/.face.icon for every user. I think other displaymanagers solve that by not doing that if there more than a handful of users. If there are more only offer the last logged in ones and always offer a user name entry.