Require application ownerships be unique
Allow groups alongside people as application operatorships