Merge \\\"Allow apps with CREATE_USERS permission to create restricted users.\\\" into nyc-dev am: 48ee87d4a7 am: be8c83a6b9
am: 40636c8a2f

Change-Id: If9f8ef35e369a5a96ebed421bfb6119aac5125cd