restrict non-ops superusers to only sign up for community or enterprise plans