We are hesitant about allowing a project to get the user profile image of any other user at this point.
How about sending both the user ID and the user PHP URL in one broadcast message and splitting it on the receiving side? If you run into issues with that approach we can help figure it out.