Changes to One-time backfill: flip an explicit list of clients whose program already ended to member access. Not a sweep of all history -- the caller supplies exactly who to fix.