Restrict group-add-member based on user agreement

[tiran]

Fixes: https://github.com/fedora-infra/freeipa-fas/issues/114 Signed-off-by: Christian Heimes cheimes@redhat.com