(You don't you have any thoughts only getting replication to ignore the “submit” user, do you?)
Just remove it from your config and disable urlauth. That will also fix the security hole you opened when you sent your submit user's password to the list :).