'unique' validates against user data only.

Add a notice that when User Restricted Access is enabled the 'unique'
rule only validates against user data (and not the whole collection.)

Addresses #266.