Never override self-referencing fallbackProxyUserId.
Document a condition that is OK only during transition.

This will become an error in the long run.  By handling this
gracefully, I think we avoid the need for a two-stage deployment
of the fallback-balancing branch.