Instead of going over all users, we query for incomplete
creations/deletions separately to only retrieve users that actually
require a resync.
The resync job is only triggered when requesting an individual user,
and from the db status everything already seems in order.