Look for bare maps in ~/.lein/profiles.d/*; disallow :user there.

Fixes #1068.
Update NEWS.md.