Broker connections, API keys, notification preferences, and default risk settings will live here. Live trading requires an admin flag on the user record.