When we reconstruct all access blockers, such as in the case of rollback, we are not initializing the TenantMigrationRecipientAccessBlocker to its correct state depending on whether _rejectBeforeTimestamp exists in the migration document.

For example, when the migration is in the kDone state (migration has completed and been forgotten), we are not setting the TenantMigrationRecipientAccessBlocker to the kRejectBefore state even though the _rejectBeforeTimestamp exists.