create_user, grant_user_access, and revoke_user_access now support host access restrictions