account lookup leaks information about banned users
We have to acknowledge that the purpose of the lookup includes checking nickname availability (for registration), so maybe the good thing to do is to return 404 for remote users while return redacted information for local users. Not sure how exactly Mastodon-FE uses this endpoint.