37d6184312
PK's "allow_inactive" actually means "allow inactive *local* users", so we do want to allow inactive local users to provide user connections. We don't want to allow non-local inactive users to provide user connections. So make the use-user-connections privilege match for both active and inactive so we get the behavior we want.