Document the fact that we're destroying user data when the upgrade/downgrade failed