Allow limiting the users/groups to execute just particular raw_configs.
This commit adds new `raw_config_keys` option to `allowed_clients`
and `allowed_groups` options to configure allowed `raw_config`
composes for this user/group.
If not set, the current behaviour is respected and any `raw_config`
compose can be generated.