Add AccessDeniedRestrictedMode attribute to allow setting up a demo environment where we can selectively disable features (such as password change)