Add IsLocal() and NewLocalUserTag.

The tag should be able to tell us if it is a local user.
Also, a simple way to explicitly create a local user tag.
`return t.Provider() == LocalProvider`?