During parsing, it expands out the external entity reference, and includes the local user information file, just as Mal hoped. The first part of the trap is sprung.