feat: Add setting for editing only allowed zones

[msiebuhr]

We host a lot of different zones; while we do have permissions set up in front of PowerDNS, it would also be nice to have defence-in-depth against unintended changes.