Fix administrative use of AutoScaling actions - EUCA-8076

Ownership checks are moved out of the persistence layer and into the
service where they are enforced either directly or via IAM policy as
appropriate.

EUCA-8076
Merge remote-tracking branch 'origin/dev/sjones/EUCA-8076' into maint/3.4/testing