Support admin permissions by location_type

[goldpbear]

Admin permissions are currently granted on a per-dataset basis by creating a dataset group called administrators.

One admin group per dataset is limiting, however. It would be convenient if we could create arbitrary dataset groups and affiliate those groups by name with individual location_types in the config. That way we can grant admin access on a location_type-within-dataset basis, not just on a dataset basis.