See https://discourse.phabricator-community.org/t/help-cannot-disable-auth-require-approval-administrator-locked-out/4183/. A user somehow managed to create an initial administrator account which required approval.
This is supposed to be impossible without mucking with the database. Plans:
- Test if enabling the approval queue via on-disk config before completing first-user setup actually puts us in this state.
- Yes: fix that.
- No: no clue how the user managed this, assume they did something weird by mistake.
- Provide bin/user approve in line with other unlock/access workflows already available in bin/user.