In the PR to add fields for role binding UUIDs in non-default scope to TenantMapping, for each field, we accidentally gave every TenantMapping the same UUID in that field. We then bootstrapped most of the tenants in stage, resulting in creating 4 RoleBindings bound to millions of tenants.

To fix this:

• In stage, update the database (giving each TenantMapping its own unique UUIDs) and delete the erroneous relations from Kessel.
• In production, just update the database.