Restrict new conversations to allowed types

We're not checking app permissions anywhere in the conversation creation flow. We really need to do this.