Add restrictions on the creation of a user based on the group to which they are creating the user to.

[Ken Mbira]