Command vault-backfill finds every address that has ever participated in
a vault deposit, mint, or transfer, and allowlists whichever of them are
not already allowed — the backfill the vault's own allowlist_enforced doc
comment calls for before enforcement is turned on.