Display legalstatus outside of accessrestrict

Extract accessrestrict/legalstatus so that it is displayed as a
“sibling” display unit to accessrestrict rather than as a
“child”/sub-unit.