Yeah, it's basically for the None case (which I don't know if it can technically happen). I ran into it in my tests when I tried passing in None, but then the `can_view_courses_for_username` will throw  an error if target_username is not defined. So I  just make sure we don't hit that error and would raise a PermissionDenied  instead.