s3upgrade: Add idmap migration, users/groups import