ceph: check migrate seq before changing auth cap