Bug 1084052: Only show "Add bounty tracking attachment" links to people who actually might do that (not everyone in core-security)