... and have the sync endpoints call it directly rather than obsure indirection via PresenceHandler
When a user first syncs, we will send them a server notice asking them to consent to the privacy policy if they have not already done so.