Covering the case of a user choosing a primary email whose cert is expired.

* Put the user into the primary_email flow, which will do the provisioning/redirection.