There's a large comment in the header file for the TenantMigrationAccessBlocker that explains how the class should be used. The class has changed since that comment was written and it's no longer correct (in particular the part about the migrationConflictRetry loop), so it should be updated to match the class's actual API.