[Design]: Add possibility to make client traffic settings location/group-based

[jensver]

Problem description

"Client Configuration Permissions" and "Client traffic policy" shouldn't be a product wide setting.
We want to allow certain users to create manual WireGuard configurations or allow some users to allow all traffic.

Proposed solution

Make "Client Configuration Permissions" and "Client traffic policy" a user/group-based setting.

Alternatives considered

No response

Impact

Important

[frq-asgard-migo]

+1 Would be very helpful since one user needs the "Predefined traffic" while everyone else should use "All traffic".