All partners now have signups and users with active access. When flipping the switch on a partner to convert them to authentication-based access we'll need to move those users onto the whitelist so that they don't lose access.

This could maybe be done in an automated way, but we'll need to think about it.