Move logic for checking CA status (locked or non-unified) to userBlockFlags

So we see that information on get edits as well as get users.

This also includes the list of groups that the user is in.

Bug: 45631
Change-Id: I48124be7a047e0eee6fda96910dd8785ddaac4a8