More user scopes

Change user scoping from `True`/`False` to `NONE`/`ONE`/`ALL`, to more succinctly capture the scope of the data that (for instance) the `Thumbs` module stores.

@nedbat @sarina: Review?