See https://discourse.phabricator-community.org/t/help-cannot-disable-auth-require-approval-administrator-locked-out/4183/. A user somehow managed to create an initial administrator account which required approval.

This is supposed to be impossible without mucking with the database. Plans:

• Test if enabling the approval queue via on-disk config before completing first-user setup actually puts us in this state.
  • Yes: fix that.
  • No: no clue how the user managed this, assume they did something weird by mistake.
• Provide bin/user approve in line with other unlock/access workflows already available in bin/user.