Add an wgOpenStackManagerRestrictedRegions option

This change adds an wgOpenStackManagerRestrictedRegions option
to restrict a list of users in a group that is granted the
accessrestrictedregions right.

Change-Id: Ia097f9627ce334d4d9559bf9fac9393544d601ac