Respect audience for usernames

Allow preventing hidden usernames from being returned by
getLocalUserFromCentralId, if the calling user doesn't have rights
to see it.

Change-Id: I3f41e5196997f3da18e60d75e316548ef688f2ea
Merge "Respect audience for usernames"