One-time secure bootstrap for Coaching. Requires the server-side INITIAL_SETUP_TOKEN when zero users exist.