This is by design. Besides the fact that Fossil treats its artifacts as immutable, to keep the history of the commits requires that no user ID be reused for another person. (Though, of course, nothing truly preventing some one from giving their credentials to some one else.)