Protected/locked/restricted flag for messages

[edemaine]

In protected state, only authors and superusers can edit the message.

This is useful e.g. for solved problems, where we don't want students to accidentally become authors and thereby trigger access inheritance via #503.

Also prevents e.g. unminimizing hints.

Seems related to #351; perhaps this could be called a protected group (with a somewhat different interface).