No allow/deny once for functions that require a restart

Fixes #1622
On demand restricting control in application list

Fixes #1615
Revert "No allow/deny once for functions that require a restart"

This reverts commit a7dbeed833cc728fc1d743b4c6ded4739e858244.

Conflicts:
	CHANGELOG.md

Refs #1622
Layout fixes

Refs #1615
Fix global state

Refs #1615
Fix corner case

Refs #1615
Updated embedded documentation

Closes #1599
Partial all on demand, even when all categories disabled

Refs #1615
merge