This is just for handling if the bucket's owner changes as part of a metadata update?
...and I suddenly realize the admins doing sync work are the only ones who go through this path, so that's A-OK.