Found checking the third cutover rather than running it. The first two were safe by accident — both are reached through a host port, which survives a change of owner. This is the first constraint found that decides the order of the migration.
