Topic/migrator user management

We *want* the migration process to blow up if this happens. Using transactions and the relic system, it's not easy for a failure to cause any inconsistent state problem. And since we test migrations on dev and staging, we need not fear a failure, it'll be fixed before it matters.