In the UI prevent maintainer to loose their ACLs by applying for co-maintainer

Add unit-tests to cover this use case.

Fixes https://github.com/fedora-infra/packagedb2/issues/17