So, IIUC the difference between user_for_tenant and get_admin_user is:

- user_for_tenant does tenant_id -> admin username
- get_admin_user does user_id -> tenant (but not through tenant_id, if there's one user) -> admin username

Is get_admin_user something internal? Is anything besides user_for_tenant supposed to call it?