Separate ability to reference blocked users from 'administer users' permission.