Change mergeUsers API to accept secondary only