Allow limiting the users/groups to execute just particular raw_configs.
    
    This commit adds new `raw_config_keys` option to `allowed_clients`
    and `allowed_groups` options to configure allowed `raw_config`
    composes for this user/group.
    
    If not set, the current behaviour is respected and any `raw_config`
    compose can be generated.