What happens when the user already exists?

Also, joining the superuser creation into this step means those secrets always need to be defined, in order to do a DB migration (basic upgrade). The way they were separated out before (below) was designed so that KA Lite upgrades could be done without any of the secrets being defined locally.