配置

Enable app user HTTP API (/users/api)
When on, login and password update require correct password. Turn off for quick testing.
Default status for new app users (e.g. active)
When on, if live_host / customer_agent lists are empty, grant roles from global app users
Maximum app users to tag per role when seeding (oldest active first)