sometimes, unique-except-self: the small validation rules that make admin edits safe

Admin edit forms have a quiet failure mode: you open a user's record, change nothing except the role,...