Data migrations (seed default groups, seed default permissions) are deliberately excluded. This also allows us to remove a lot of now unnecessary public API from the migrator and migration repository.