Enforce user_id exclusivity for AS registrations

This whole set of checks is kind of an ugly mess, which I may clean up
at some point, but for now let's be correct.