EncodeUserIdentifier transforms a subject value (the user's username) to make it DNS-1123 compliant, by removing invalid characters, trimming the length and prefixing with a CRC32 checksum if required.

Maximum Length for compliant username is limited to 20 characters such that the result namespace of the type "<compliantUsername>-<ns_suffix>" is less than 30 characters, to be dns compliant.