RFC 167: Enforce site-admin roles

Created by: unknwon

The actual form of enforcement hasn't been decided yet, see discussions in the RFC.

Part of RFC 167.

TODO

• All new users are prompted to be side admins in Free tier
• Prevent user creation with a malformed/expired license
• Dotcom: no new users can be prompted to site admin automatically
• Prevent revoking site admins