AccountService: Implements default account failsafe

Implements one of the fixes outlined in issue #2637.

/cc @sendhil + @astralbodies + @koke 

Nitpicky, but should these keys be defined once in a separate file and reused by both migration policies?