Shower thought.
If staff impersonation, or impersonation in general is an issue. Why not have it so you can't use usernames that are already used?
Why struggle being impersonated when you can be the only one with the name.
:P
Reply below lemme see whatchu think.