fix #10209: restrict one's changes to user, group

To test, work with SQL to make sure that you cannot rename the `root`, `guest` users, nor the `system`, `user`, `guest` groups, nor can you remove the `root` user from the `system` or `user` groups. Also test that other changes on those tables -- updates, deletes -- remain permitted.

Also, given #1595, check that http://hudson.openmicroscopy.org.uk/job/OmeroJava-integration-develop/lastCompletedBuild/testngreports/integration/integration.AdminServiceTest/ continues to pass.

Fixes https://trac.openmicroscopy.org.uk/ome/ticket/10209.

--no-rebase