Merge \\"Allow apps with CREATE_USERS permission to create restricted users.\\" into nyc-dev am: 48ee87d4a7
am: e1eb4cd0e7

Change-Id: I9539a9ebc51b3e89bfff3a47f55071daae265546