Merge \\"Allow apps with CREATE_USERS permission to create restricted users.\\" into nyc-dev am: 48ee87d4a7
am: be8c83a6b9

Change-Id: I479843ca4a8b21d11191106a8090bcaf7e78ea6c