We no longer have need for the idea of a "restricted" user, and any additional finessing that needs doing will be through roles (#349). Let's remove the attribute and all the interface-splitting.
