One-time setup

Create the owner account

This works only once and requires the private setup token stored outside the database.