pcoFetchStatus reports a status instead of throwing, so the People probe can
tell "no access" from "no such record"; pcoFetchBirthday reads one person's
birthdate as MM-DD, deliberately discarding the year so a volunteer's age
never lands on this machine. The sync fetches one birthday per unique person,
best-effort — a blocked token just yields '' and never fails the sync.