Allow limited admins to assign the "api-umbrella-key-creator" role.

https://github.com/18F/api.data.gov/issues/157