SKA security advisory: insufficient validation of group access rule edit privileges

Previously, /groups/{group}/access_rules/{id} accepted POSTs from any authenticated user, allowing them to overwrite SSH authorized_keys options for all group members, regardless of whether they are in the specified group or not. This exposed a privilege escalation vector and risk of access disruption.

This issue was identified and resolved by MegaManSec in #78.