Deal with "user" privs that do not work on remote clusters.
There is no way to specify "user" privs on the geni path, so offering this via the Portal only makes sense when the only backend cluster is the local cluster, and PROTOGENI_LOCALUSER is on. @ricci asked me to get some numbers from the database to see who has user privs.