NeedsSetup is true when the instance has no users yet and requires initial
setup (creating the first admin account). Unlike a null admin, this stays
false once any user exists, so an instance that has lost its admins is not
mistaken for a fresh install.